Privacy Policy – Kiross Turfcare
Effective Date: 7 February 2026
Last Updated: 7 February 2026
Who we are
Kiross Turfcare is the trading name of Kiross Turfcare Limited, a company registered in Scotland.
Company number: SC629750
Registered office: Wellhillock Croft, Keith Hall, Inverurie, Aberdeenshire, AB51 0NB, United Kingdom
VAT number: 338 2491 88
Contact: info@kirossturfcare.com | [Add your phone number here if you want]
We operate the website https://kirossturfcare.com, an online shop selling turfcare equipment, zero-turn mowers, ATV flail mowers, and related products.
We are the data controller for any personal data we collect and process. We take your privacy seriously and are committed to protecting your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What personal data we collect
We collect only the personal data necessary to provide our services, process orders, and comply with legal obligations. This includes:
From orders and checkout — Name, billing/shipping address, email address, telephone number, order details (products purchased, amounts paid), payment information (processed securely by our payment provider—see below).
From account creation (if you register) — Email address, name, password (hashed), order history.
Automatically — IP address, browser type, device information, pages visited, time/date of access (basic server logs).
From communications — Any personal details you provide when contacting us (e.g., via email or form).
We do not collect special category data (e.g., health, race, religion) or data from children under 16.
How and why we use your personal data (purposes and lawful basis)
Purpose: Process and fulfil your orders, including shipping and payment
Personal data used: Name, address, email, phone, order details, payment info
Lawful basis: Performance of a contract
Purpose: Send order confirmations, shipping updates, and essential transactional emails
Personal data used: Email, order details
Lawful basis: Performance of a contract
Purpose: Respond to your enquiries or support requests
Personal data used: Name, email, any details you provide
Lawful basis: Legitimate interests – to run our business and provide customer service
Purpose: Maintain site security, prevent fraud, and debug issues
Personal data used: IP address, device/browser info, logs
Lawful basis: Legitimate interests
Purpose: Comply with legal obligations (e.g., tax records, accounting)
Personal data used: Order details, name, address
Lawful basis: Legal obligation
We do not use your data for marketing emails, profiling, automated decision-making, or behavioural advertising unless you separately consent (which we do not currently collect).
Who we share your personal data with
We do not sell, rent, or share your personal data with third parties for their own purposes. We keep your information private and do not disclose it to anyone else except in these limited situations:
Payment processors — We use Stripe (via WooPayments/Stripe Gateway) to handle card payments. Stripe acts as an independent data controller for payment processing. We only share the minimum necessary (e.g., name, email, order amount, billing address). Stripe’s privacy policy: https://stripe.com/gb/privacy
Essential service providers (processors acting only on our instructions) — Hosting provider (for site operation and logs), any shipping carrier (name/address for delivery only). These providers are bound by strict contracts and UK GDPR requirements.
Legal requirements — If required by law, court order, or to protect our rights/safety (very rare).
No other sharing occurs.
International transfers
All data is processed and stored within the UK or EEA. If any transfer outside the UK/EEA is ever needed (unlikely), we would use UK-approved safeguards (e.g., UK International Data Transfer Agreement).
How long we keep your data
Order data (accounting/tax purposes): 6 years after order date (legal requirement).
Account data: Until you delete your account or request erasure.
Logs/enquiries: Up to 2 years (or sooner if no longer needed).
We delete or anonymise data when no longer required.
Your rights under UK GDPR
You have the following rights (free of charge, subject to verification):
Right to access – See what data we hold about you.
Right to rectification – Correct inaccurate data.
Right to erasure (“right to be forgotten”) – Delete your data (except where we must keep it for legal reasons).
Right to restrict processing – Limit use in certain cases.
Right to data portability – Receive your data in a machine-readable format.
Right to object – Object to processing based on legitimate interests.
To exercise any right, email us at info@kirossturfcare.com. We will respond within one month (extendable if complex). You can also complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint
Cookies and similar technologies
We use only essential cookies (for site functionality, login, cart, preferences). No analytics, advertising, or tracking cookies are used. For more details, adjust your browser settings.
Security
We use reasonable technical and organisational measures (HTTPS, secure hosting, payment encryption via Stripe) to protect your data. However, no system is 100% secure.
Children
Our site is not intended for children under 16. We do not knowingly collect data from children.
Changes to this policy
We may update this policy occasionally (e.g., if laws change). Changes will be posted here with an updated date. Significant changes may be notified via email or site notice.
Contact us
For any privacy questions:
Email: info@kirossturfcare.com
Post: Kiross Turfcare Limited, Wellhillock Croft, Keith Hall, Inverurie, AB51 0NB
Thank you for trusting us with your information.